aws-acm-certificates
Retrieves a list of certificate ARNs and domain names from AWS Certificate Manager.
aws-acm-certificates [profile=PROFILE] [region=REGION]
- profile=PROFILE
- The identifier of AWS connect profile
- region=REGION
- AWS region
AWS IAM Policy
To use this command, you must allow the below permissions in your AWS IAM policy.
- acm:DescribeCertificate
- acm:ListCertificates
Output Fields
Field | Type | Name | Description |
---|---|---|---|
aws_profile | String | Connect profile | The identifier of AWS connect profile |
region | String | Region | e.g. ap-northeast-2 |
type | String | Type | e.g. IMPORTED, AMAZON_ISSUED |
domain_name | String | Domain name | May include wildcard. e.g. ko.logpresso.com |
status | String | Status | e.g. ISSUED |
serial | String | Serial | e.g. f8:b6:44:3b:0d:4f:1a:31:8e:dd:10:ad:9b:a4:d6:f3 |
not_before | Date | Not before | |
not_after | Date | Not after | |
cert_arn | String | Certificate ARN | |
ca_arn | String | CA ARN | |
created_at | Date | Created at | |
failure_reason | String | Failure reason | |
imported_at | Date | Imported at | |
in_use_by | List | In use by | Elements with ARN which uses this certificate |
issued_at | Date | Issued at | |
issuer | String | Issuer | e.g. COMODO CA Limited, Amazon |
key_algorithm | String | Key algorithm | e.g. RSA-2048 |
renewal_eligibility | String | Renewal eligibility | e.g. INELIGIBLE, ELIGIBLE |
revocation_reason | String | Revocation reason | |
revoked_at | Date | Revoked at | |
signature_algorithm | String | Signature algorithm | e.g. SHA256WITHRSA |
subject_alternative_names | List | Subject alternative names | |
domain_validations | List | Domain validations | e.g. [ko.logpresso.com, www.ko.logpresso.com] |
key_usages | String | Key usages | e.g. [DIGITAL_SIGNATURE, KEY_ENCIPHERMENT] |
extended_key_usages | String | Extended key usages | Elements with oid and name properties |